Checkpoint | AI Supply Chain Security | TryHackMe

Four candidates. Three threats. Make the production call.

Disclaimer: This blog post is based on a challenge hosted on TryHackMe and it is intended for educational purposes only.

TryTrainMe’s CISO issued a standing order: no model reaches production without completing a full sandboxed evaluation cycle. Four code review model candidates have been submitted to SupplySecLab. All four have completed their evaluation runs. The automated screening has flagged three candidates as unsafe. Your task is to assess Candidate A and make the production call.

🛠️ Type: Challenge

👤 Role: AI Security Analyst

💪 Difficulty: Easy

🔗Link :https://tryhackme.com/room/checkpoint

Press the Open Agent button near the top of this task to load Candidate A’s evaluation. The telemetry panel streams automatically. Read both sessions before sending any queries.

The evidence is in the telemetry and the agent.

Candidate A’s load session shows a suspicious file access event. What file did it attempt to read?

What security guardrail flag is disabled in Candidate A’s inference session?

Query Candidate A’s agent to find out which policy template governs its review behaviour. What is the policy template?

Candidate A’s two supply chain failures are not independent. Find what links them and use it to retrieve the flag. What is the flag?

Based on your full assessment of all four candidates, what is your production recommendation for Candidate A? Enter: Approve or Reject

Reject

Which candidate would you approve for production deployment?

B